# External web-only apps — reverse proxy to strip X-Frame-Options for iframe embedding
# Used by appLauncher.ts EXTERNAL_PROXY_PORT mapping
# Deployed to /etc/nginx/conf.d/external-app-proxies.conf

# 484 Kitchen (484.kitchen) → port 8902
server {
    listen 8902;
    server_name _;
    resolver 1.1.1.1 8.8.8.8 valid=300s;
    resolver_timeout 5s;

    location / {
        set $upstream_484 https://484.kitchen;
        proxy_pass $upstream_484;
        proxy_http_version 1.1;
        proxy_set_header Host 484.kitchen;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Accept-Encoding "";
        proxy_ssl_server_name on;
        proxy_ssl_name 484.kitchen;
        proxy_hide_header X-Frame-Options;
        add_header X-Frame-Options "SAMEORIGIN" always;
        proxy_hide_header Content-Security-Policy;
        proxy_connect_timeout 60s;
        proxy_read_timeout 60s;

        proxy_redirect https://484.kitchen/ /;
        sub_filter_once off;
        sub_filter_types text/html text/css application/javascript;
    }
}

# Arch Presentation (present.l484.com) → port 8903
server {
    listen 8903;
    server_name _;
    resolver 1.1.1.1 8.8.8.8 valid=300s;
    resolver_timeout 5s;

    location / {
        set $upstream_present https://present.l484.com;
        proxy_pass $upstream_present;
        proxy_http_version 1.1;
        proxy_set_header Host present.l484.com;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Accept-Encoding "";
        proxy_ssl_server_name on;
        proxy_ssl_name present.l484.com;
        proxy_hide_header X-Frame-Options;
        add_header X-Frame-Options "SAMEORIGIN" always;
        proxy_hide_header Content-Security-Policy;
        proxy_connect_timeout 60s;
        proxy_read_timeout 60s;

        proxy_redirect https://present.l484.com/ /;
        sub_filter_once off;
        sub_filter_types text/html text/css application/javascript;
    }
}